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SENDER S SENDS AUTHENTICATION REQUEST 
TO RECIPIENT R FOR DATA MESSAGE m, WHICH 
WAS PREVIOUSLY OR CONCURRENTLY SENT TO R 



■ S 

S-^ 



(54) Systemandmethodformessageauthenticationinanon-malleablepublic-k^ 



(57) Amethodisprovidedforauthenticationofen- 

cryptedmessages(M).Anon-malleabIepubIic-keyen- 

cryptiontechniqueisemployed,sothataneavesdrop- 

per(B)cannotemployanencryptedmessage(M),pre- 

viouslyoverheard.togenerateamessagewhich.when 

senttoarecipient(R),whichwouIdpassasamessage 

originatingfrornavalidsender(S).lnapreferredem- 

bodiment.aprotocolisprovidedinwhich.inresponse 

toamessageauthenticationrequest(req)fromasend- 

er,arecipient(R)sendsthesender(S)astring(st),en- 

cryptedaccordingtothesender'snon-malleablepublic 

key(Es).Thesender(S)decrypts the string using its 

private key, and sends the recipient (R) a message 

(Auth (M, ST)) which is a function (Auth) of the string 

(St)andthemessage(M)tobeauthenticated.Because 

ofthenon-malleabilityofthepublickeys^neavesdrop- 

percannotimpersonatethesender(S)ortherecipient 

(R)andproduceadisinformationmessagewhichwould 

neverthelesscontainthecorrectauthorizationstring. 



R SENDS RESPONSE MESSAGE st ENCRYPTED 
WITH S*s PUBUC KEY, TO S . 

Es(st) 



S SENDS AUTHENTICATION MESSAGE, WHICH 
IS A FUNCTION OF m AND st, TO R 

c Auth(m.st) R 
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